Behavioral task
behavioral1
Sample
4544b209b455f06b21232c3e86c3ba67.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4544b209b455f06b21232c3e86c3ba67.exe
Resource
win10v2004-20231215-en
General
-
Target
4544b209b455f06b21232c3e86c3ba67
-
Size
2.7MB
-
MD5
4544b209b455f06b21232c3e86c3ba67
-
SHA1
00bb336ff6d8b6ff2b58e122c037e2544b3ae6b8
-
SHA256
ba395e0e18fa0cf292f932ca133dc3293ba03653c2528507c42d552ad8fefeb3
-
SHA512
710a31f4731dabaa365a23c4b9fc0e1c3a468e06757e1afb819a76f20621869ba7520d2c998b728b74b1538b65568003783bad8cab1583e7329679d566cb61c4
-
SSDEEP
49152:o8AiwdaEEeiPhpHyFfxTsHSo8etL+DEMkdSOkF1d:ohvaEEemhpCfVeJnMkdS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4544b209b455f06b21232c3e86c3ba67
Files
-
4544b209b455f06b21232c3e86c3ba67.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE